Article 9 · Chapter III: High-Risk AI Systems
Risk Management System
High risk
Summary
A continuous, iterative risk-management process across the entire lifecycle: identify and analyse known and foreseeable risks, estimate and evaluate risks, evaluate post-market data, and adopt risk-control measures. Special attention to risks affecting persons under 18 and other vulnerable groups.
Key obligations
- Document a risk-management system spanning the full lifecycle
- Identify risks to health, safety and fundamental rights
- Test against measurable metrics tied to the intended purpose
- Update continuously based on post-market monitoring
Related articles
- Art 8Compliance with the Requirements
- Art 10Data and Data Governance
- Art 13Transparency and Provision of Information to Deployers
- Art 14Human Oversight
- Art 15Accuracy, Robustness and Cybersecurity
- Art 17Quality Management System
- Art 72Post-Market Monitoring by Providers and Post-Market Monitoring Plan for High-Risk AI Systems